I simply shut down one of my web servers instead of leave it exposed to this PHP exploit. This is real bad.